October is national Cybersecurity Awareness Month and a good time to review ways to protect information. Information technology services (ITS) staff provided three keys to staying safe online:
- Use strong passwords and multi-factor authentication (MFA).
- Recognize and report phishing.
- Update technology software when it becomes available.
Stay alert to threats
Cyber threats often are disguised as routine messages or offers that are easy to miss as trouble. Here are some frequent red flags:
Fake login pages: To avoid fake login pages, always use the sign-on dashboard, a secure, single sign-on platform for apps already in use at the university. Be sure when signing in you see login.microsoftonline.com in the URL bar of your browser.
Phishing forms and emails: Never respond to forms or emails requesting your Net-ID and password. ITS will never ask for your login information over a form or email.
Estate giveaway scams: Offers of expensive items for a small shipping fee typically are scams. Never transfer money to someone in response to an email offer.
Impersonated tech support: Never share your login credentials with someone claiming to be tech support. ITS will never request your password or MFA code using a text message or phone call.
How to report phishing
If you receive a message you believe is phishing for your information, you can:
Protect your computer
Many employees share a workspace or are in areas open to the public. They should lock their screen when they step away from their computer or laptop. Users can adjust their screen saver settings to begin running after a selected number of inactive minutes and require a password to log back in after the screen saver begins or the display is turned off. Users also can quick-lock their computer anytime they are away:
- On a Windows computer, click the "Windows" + "L" keys.
- On a Mac, click "Control" + "Command" + "Q."